Help.....please

Steve_Boorman

My niece has infected us all with a worm spread through MSN...have tried to get rid of it to no avail. Anti virus programmes don't remove it.Tried removing msn and reinstalling..again no good.She clicked on a zip file and the rest is history...it has spread to everyone in her address book....and mine ...and so on ad nauseum.
I have several strange processes going on in Windows Task manager... ztgtyicv.exe and Teatimer.exe. Does anyone know the best way to deworm my pc without having to reformat it? I am a novice so all advice gratefully received.

foofi22

I have tried searching google for ztgtyicv.exe - are you sure this process exists? The teatimer process is related to spybot search and destroy.

What problems are the worm causing you? What anti virus are you using? Does it detect the worm and not remove it? Or is there no sign of it in a scan?

TechTerry

Scan using Bitdefender or Kaspersky, they SHOULD pick it up.

[Deleted User]

Boot your computer into Safe Mode by pressing F8 on start up, then run your anti virus/spyware detection programs. Safe Mode will boot your computer up without your background programs etc so you can go in and troubleshoot.

Steve_Boorman

Thanks for the info chaps....I've tried scanning in safe mode....nothing showing after full deep scan with Avast antivirus. This worm seems to create its own log for msn...click start /Run/c:\msn.log .... shows everyone in my list who is on line and sends them the zip file.Now I cannot open Desktop items such as My Computer...get this error message..Sysfader:Explorer.EXE - Application Error X The instruction at "0x04ea93b" referenced memory at "0x00000000". The memory could not be "read". Click on OK to terminate program. Click on cancel to debug the program. If I click on cancel I then get a program error message.
It seems that there is little more that I can do except wipe the whole thing and start again.

[Deleted User]

Have you got something like Spybot or Adaware installed that you can scan the system in Safe Mode before you consider starting over?

albertross_2

try help, system restore, put it back to the state it was before the infection, then install kaspersky 30 day free trial, and do a scan

Steve_Boorman

Thanks again for the advice.....Alsertross I'm running Windows 2000 which doesn't have system restore...any other suggestions??
I have run Spybot shows no infections.Looks like formatting the computer is the only real option.

totalsolutions

http://www.sophos.com/support/disinfection/worms.html

Bettingmad

Steve_Boorman wrote: »

My niece has infected us all with a worm spread through MSN...have tried to get rid of it to no avail. Anti virus programmes don't remove it.Tried removing msn and reinstalling..again no good.She clicked on a zip file and the rest is history...it has spread to everyone in her address book....and mine ...and so on ad nauseum.
I have several strange processes going on in Windows Task manager... ztgtyicv.exe and Teatimer.exe. Does anyone know the best way to deworm my pc without having to reformat it? I am a novice so all advice gratefully received.

Teatimer.exe is a SpybotSD process